Описание
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.
Ссылки
- Issue TrackingThird Party Advisory
- Patch
- Patch
- Third Party Advisory
- Third Party Advisory
- Issue TrackingThird Party Advisory
- Patch
- Patch
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
EPSS
8.1 High
CVSS3
Дефекты
Связанные уязвимости
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HT ...
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.
Уязвимость реализации поддержки WISPR диспетчера соединений Connman, связанная с использованием памяти после ее освобождения, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
EPSS
8.1 High
CVSS3